CVE-2005-3817

🗓️ 26 Nov 2005 02:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

SQL injection in Softbiz Web Host Directory Script 1.1 allows remote attackers to execute arbitrary SQL commands

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2005-3817	28 Apr 201000:00	–	circl
Cvelist	CVE-2005-3817	26 Nov 200502:00	–	cvelist
Exploit DB	SoftBizScripts Hosting Script - SQL Injection	28 Apr 201000:00	–	exploitdb
Exploit DB	SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection	24 Nov 200500:00	–	exploitdb
Exploit DB	SoftBiz Web Hosting Directory Script 1.1 - 'review.php?sbres_id' SQL Injection	24 Nov 200500:00	–	exploitdb
Exploit DB	SoftBiz Web Hosting Directory Script 1.1 - 'browsecats.php?cid' SQL Injection	24 Nov 200500:00	–	exploitdb
Exploit DB	SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection	24 Nov 200500:00	–	exploitdb
EUVD	EUVD-2005-3812	7 Oct 202500:30	–	euvd
NVD	CVE-2005-3817	26 Nov 200502:03	–	nvd
Prion	Sql injection	6 May 200815:20	–	prion

NVD

Node

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23208
osvdb	www.osvdb.org/21083
vupen	www.vupen.com/english/advisories/2005/2557
osvdb	www.osvdb.org/21081
osvdb	www.osvdb.org/21082
osvdb	www.osvdb.org/21079
pridels0	www.pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html
osvdb	www.osvdb.org/21080
secunia	www.secunia.com/advisories/17724
securityfocus	www.securityfocus.com/bid/15561

Parameter	Position	Path	Description	CWE
cid	query param	search_result.php	SQL injection in search_result.php via cid parameter	CWE-89
sbres_id	query param	review.php	SQL injection in review.php via sbres_id parameter	CWE-89
cid	query param	browsecats.php	SQL injection in browsecats.php via cid parameter	CWE-89
h_id	query param	email.php	SQL injection in email.php via h_id parameter	CWE-89

16 Jun 2026 22:17Current

8.6High risk

Vulners AI Score8.6

CVSS 27.5

EPSS0.04088